suse-su-2024:1450-1
Vulnerability from csaf_suse
Published
2024-04-26 13:53
Modified
2024-04-26 13:53
Summary
Security update for java-1_8_0-openjdk
Notes
Title of the patch
Security update for java-1_8_0-openjdk
Description of the patch
This update for java-1_8_0-openjdk fixes the following issues:
- CVE-2024-21011: Fixed denial of service due to long Exception message logging (JDK-8319851,bsc#1222979)
- CVE-2024-21068: Fixed integer overflow in C1 compiler address generation (JDK-8322122,bsc#1222983)
- CVE-2024-21085: Fixed Pack200 excessive memory allocation (JDK-8322114,bsc#1222984)
- CVE-2024-21094: Fixed unauthorized data modification due to C2 compilation failure with 'Exceeded _node_regs array' (JDK-8317507,JDK-8325348,bsc#1222986)
Other fixes:
- Update to version jdk8u412 (icedtea-3.31.0) (April 2024 CPU)
* Security fixes
+ JDK-8318340: Improve RSA key implementations
* Import of OpenJDK 8 u412 build 08
+ JDK-8011180: Delete obsolete scripts
+ JDK-8016451: Scary messages emitted by
build.tools.generatenimbus.PainterGenerator during build
+ JDK-8021961: setAlwaysOnTop doesn't behave correctly in
Linux/Solaris under certain scenarios
+ JDK-8023735: [TESTBUG][macosx]
runtime/XCheckJniJsig/XCheckJSig.java fails on MacOS X
+ JDK-8074860: Structured Exception Catcher missing around
CreateJavaVM on Windows
+ JDK-8079441: Intermittent failures on Windows with 'Unexpected
exit from test [exit code: 1080890248]' (0x406d1388)
+ JDK-8155590: Dubious collection management in
sun.net.www.http.KeepAliveCache
+ JDK-8168518: rcache interop with krb5-1.15
+ JDK-8183503: Update hotspot tests to allow for unique test
classes directory
+ JDK-8186095: upgrade to jtreg 4.2 b08
+ JDK-8186199: [windows] JNI_DestroyJavaVM not covered by SEH
+ JDK-8192931: Regression test
java/awt/font/TextLayout/CombiningPerf.java fails
+ JDK-8208655: use JTreg skipped status in hotspot tests
+ JDK-8208701: Fix for JDK-8208655 causes test failures in CI
tier1
+ JDK-8208706: compiler/tiered/
/ConstantGettersTransitionsTest.java fails to compile
+ JDK-8213410: UseCompressedOops requirement check fails fails
on 32-bit system
+ JDK-8222323: ChildAlwaysOnTopTest.java fails with
'RuntimeException: Failed to unset alwaysOnTop'
+ JDK-8224768: Test ActalisCA.java fails
+ JDK-8251155: HostIdentifier fails to canonicalize hostnames
starting with digits
+ JDK-8251551: Use .md filename extension for README
+ JDK-8268678: LetsEncryptCA.java test fails as Let’s Encrypt
Authority X3 is retired
+ JDK-8270280: security/infra/java/security/cert/
/CertPathValidator/certification/LetsEncryptCA.java OCSP
response error
+ JDK-8270517: Add Zero support for LoongArch
+ JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
/security/cert/CertPathValidator/certification/BuypassCA.java
no longer needs ocspEnabled
+ JDK-8276139: TestJpsHostName.java not reliable, better to
expand HostIdentifierCreate.java test
+ JDK-8288132: Update test artifacts in QuoVadis CA interop
tests
+ JDK-8297955: LDAP CertStore should use LdapName and not
String for DNs
+ JDK-8301310: The SendRawSysexMessage test may cause a JVM
crash
+ JDK-8308592: Framework for CA interoperability testing
+ JDK-8312126: NullPointerException in CertStore.getCRLs after
8297955
+ JDK-8315042: NPE in PKCS7.parseOldSignedData
+ JDK-8315757: [8u] Add cacerts JTREG tests to GHA tier1 test
set
+ JDK-8320713: Bump update version of OpenJDK: 8u412
+ JDK-8321060: [8u] hotspot needs to recognise VS2022
+ JDK-8321408: Add Certainly roots R1 and E1
+ JDK-8322725: (tz) Update Timezone Data to 2023d
+ JDK-8322750: Test 'api/java_awt/interactive/
/SystemTrayTests.html' failed because A blue ball icon is
added outside of the system tray
+ JDK-8323202: [8u] Remove get_source.sh and hgforest.sh
+ JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
/platform/docker/TestDockerMemoryMetrics.java always fail
because OOM killed
+ JDK-8324530: Build error with gcc 10
+ JDK-8325150: (tz) Update Timezone Data to 2024a
* Bug fixes
+ Support make 4.4
- Do not recommend timezone-java8 (bsc#1213470)
- Use %patch -P N instead of deprecated %patchN.
Patchnames
SUSE-2024-1450,SUSE-SLE-SERVER-12-SP5-2024-1450
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "low"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_8_0-openjdk",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_8_0-openjdk fixes the following issues:\n\n- CVE-2024-21011: Fixed denial of service due to long Exception message logging (JDK-8319851,bsc#1222979)\n- CVE-2024-21068: Fixed integer overflow in C1 compiler address generation (JDK-8322122,bsc#1222983) \n- CVE-2024-21085: Fixed Pack200 excessive memory allocation (JDK-8322114,bsc#1222984)\n- CVE-2024-21094: Fixed unauthorized data modification due to C2 compilation failure with \u0027Exceeded _node_regs array\u0027 (JDK-8317507,JDK-8325348,bsc#1222986)\n\nOther fixes:\n- Update to version jdk8u412 (icedtea-3.31.0) (April 2024 CPU)\n * Security fixes\n + JDK-8318340: Improve RSA key implementations\n * Import of OpenJDK 8 u412 build 08\n + JDK-8011180: Delete obsolete scripts\n + JDK-8016451: Scary messages emitted by\n build.tools.generatenimbus.PainterGenerator during build\n + JDK-8021961: setAlwaysOnTop doesn\u0027t behave correctly in\n Linux/Solaris under certain scenarios\n + JDK-8023735: [TESTBUG][macosx]\n runtime/XCheckJniJsig/XCheckJSig.java fails on MacOS X\n + JDK-8074860: Structured Exception Catcher missing around\n CreateJavaVM on Windows\n + JDK-8079441: Intermittent failures on Windows with \u0027Unexpected\n exit from test [exit code: 1080890248]\u0027 (0x406d1388)\n + JDK-8155590: Dubious collection management in\n sun.net.www.http.KeepAliveCache\n + JDK-8168518: rcache interop with krb5-1.15\n + JDK-8183503: Update hotspot tests to allow for unique test\n classes directory\n + JDK-8186095: upgrade to jtreg 4.2 b08\n + JDK-8186199: [windows] JNI_DestroyJavaVM not covered by SEH\n + JDK-8192931: Regression test\n java/awt/font/TextLayout/CombiningPerf.java fails\n + JDK-8208655: use JTreg skipped status in hotspot tests\n + JDK-8208701: Fix for JDK-8208655 causes test failures in CI\n tier1\n + JDK-8208706: compiler/tiered/\n /ConstantGettersTransitionsTest.java fails to compile\n + JDK-8213410: UseCompressedOops requirement check fails fails\n on 32-bit system\n + JDK-8222323: ChildAlwaysOnTopTest.java fails with\n \u0027RuntimeException: Failed to unset alwaysOnTop\u0027\n + JDK-8224768: Test ActalisCA.java fails\n + JDK-8251155: HostIdentifier fails to canonicalize hostnames\n starting with digits\n + JDK-8251551: Use .md filename extension for README\n + JDK-8268678: LetsEncryptCA.java test fails as Let\u2019s Encrypt\n Authority X3 is retired\n + JDK-8270280: security/infra/java/security/cert/\n /CertPathValidator/certification/LetsEncryptCA.java OCSP\n response error\n + JDK-8270517: Add Zero support for LoongArch\n + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/\n /security/cert/CertPathValidator/certification/BuypassCA.java\n no longer needs ocspEnabled\n + JDK-8276139: TestJpsHostName.java not reliable, better to\n expand HostIdentifierCreate.java test\n + JDK-8288132: Update test artifacts in QuoVadis CA interop\n tests\n + JDK-8297955: LDAP CertStore should use LdapName and not\n String for DNs\n + JDK-8301310: The SendRawSysexMessage test may cause a JVM\n crash\n + JDK-8308592: Framework for CA interoperability testing\n + JDK-8312126: NullPointerException in CertStore.getCRLs after\n 8297955\n + JDK-8315042: NPE in PKCS7.parseOldSignedData\n + JDK-8315757: [8u] Add cacerts JTREG tests to GHA tier1 test\n set\n + JDK-8320713: Bump update version of OpenJDK: 8u412\n + JDK-8321060: [8u] hotspot needs to recognise VS2022\n + JDK-8321408: Add Certainly roots R1 and E1\n + JDK-8322725: (tz) Update Timezone Data to 2023d\n + JDK-8322750: Test \u0027api/java_awt/interactive/\n /SystemTrayTests.html\u0027 failed because A blue ball icon is\n added outside of the system tray\n + JDK-8323202: [8u] Remove get_source.sh and hgforest.sh\n + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/\n /platform/docker/TestDockerMemoryMetrics.java always fail\n because OOM killed\n + JDK-8324530: Build error with gcc 10\n + JDK-8325150: (tz) Update Timezone Data to 2024a\n * Bug fixes\n + Support make 4.4\n\n- Do not recommend timezone-java8 (bsc#1213470)\n\n- Use %patch -P N instead of deprecated %patchN.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-1450,SUSE-SLE-SERVER-12-SP5-2024-1450",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_1450-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:1450-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20241450-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:1450-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2024-April/035113.html"
},
{
"category": "self",
"summary": "SUSE Bug 1213470",
"url": "https://bugzilla.suse.com/1213470"
},
{
"category": "self",
"summary": "SUSE Bug 1222979",
"url": "https://bugzilla.suse.com/1222979"
},
{
"category": "self",
"summary": "SUSE Bug 1222983",
"url": "https://bugzilla.suse.com/1222983"
},
{
"category": "self",
"summary": "SUSE Bug 1222984",
"url": "https://bugzilla.suse.com/1222984"
},
{
"category": "self",
"summary": "SUSE Bug 1222986",
"url": "https://bugzilla.suse.com/1222986"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-21011 page",
"url": "https://www.suse.com/security/cve/CVE-2024-21011/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-21068 page",
"url": "https://www.suse.com/security/cve/CVE-2024-21068/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-21085 page",
"url": "https://www.suse.com/security/cve/CVE-2024-21085/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-21094 page",
"url": "https://www.suse.com/security/cve/CVE-2024-21094/"
}
],
"title": "Security update for java-1_8_0-openjdk",
"tracking": {
"current_release_date": "2024-04-26T13:53:09Z",
"generator": {
"date": "2024-04-26T13:53:09Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:1450-1",
"initial_release_date": "2024-04-26T13:53:09Z",
"revision_history": [
{
"date": "2024-04-26T13:53:09Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"product_id": "java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.412-27.99.1.aarch64",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.412-27.99.1.aarch64",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.412-27.99.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.412-27.99.1.aarch64",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.412-27.99.1.aarch64",
"product_id": "java-1_8_0-openjdk-src-1.8.0.412-27.99.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.412-27.99.1.i586",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.412-27.99.1.i586",
"product_id": "java-1_8_0-openjdk-1.8.0.412-27.99.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.412-27.99.1.i586",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.412-27.99.1.i586",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.412-27.99.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.i586",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.i586",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.i586",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.i586",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.i586",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.i586",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.412-27.99.1.i586",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.412-27.99.1.i586",
"product_id": "java-1_8_0-openjdk-src-1.8.0.412-27.99.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-javadoc-1.8.0.412-27.99.1.noarch",
"product": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.412-27.99.1.noarch",
"product_id": "java-1_8_0-openjdk-javadoc-1.8.0.412-27.99.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"product_id": "java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.412-27.99.1.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.412-27.99.1.ppc64le",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.412-27.99.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.412-27.99.1.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.412-27.99.1.ppc64le",
"product_id": "java-1_8_0-openjdk-src-1.8.0.412-27.99.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.412-27.99.1.s390",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.412-27.99.1.s390",
"product_id": "java-1_8_0-openjdk-1.8.0.412-27.99.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.412-27.99.1.s390",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.412-27.99.1.s390",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.412-27.99.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.412-27.99.1.s390",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.412-27.99.1.s390",
"product_id": "java-1_8_0-openjdk-src-1.8.0.412-27.99.1.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"product_id": "java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.412-27.99.1.s390x",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.412-27.99.1.s390x",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.412-27.99.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.412-27.99.1.s390x",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.412-27.99.1.s390x",
"product_id": "java-1_8_0-openjdk-src-1.8.0.412-27.99.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"product_id": "java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.412-27.99.1.x86_64",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.412-27.99.1.x86_64",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.412-27.99.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.412-27.99.1.x86_64",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.412-27.99.1.x86_64",
"product_id": "java-1_8_0-openjdk-src-1.8.0.412-27.99.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-21011",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-21011"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-21011",
"url": "https://www.suse.com/security/cve/CVE-2024-21011"
},
{
"category": "external",
"summary": "SUSE Bug 1222979 for CVE-2024-21011",
"url": "https://bugzilla.suse.com/1222979"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-04-26T13:53:09Z",
"details": "low"
}
],
"title": "CVE-2024-21011"
},
{
"cve": "CVE-2024-21068",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-21068"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2 and 22; Oracle GraalVM Enterprise Edition: 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-21068",
"url": "https://www.suse.com/security/cve/CVE-2024-21068"
},
{
"category": "external",
"summary": "SUSE Bug 1222983 for CVE-2024-21068",
"url": "https://bugzilla.suse.com/1222983"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-04-26T13:53:09Z",
"details": "low"
}
],
"title": "CVE-2024-21068"
},
{
"cve": "CVE-2024-21085",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-21085"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-21085",
"url": "https://www.suse.com/security/cve/CVE-2024-21085"
},
{
"category": "external",
"summary": "SUSE Bug 1222984 for CVE-2024-21085",
"url": "https://bugzilla.suse.com/1222984"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-04-26T13:53:09Z",
"details": "low"
}
],
"title": "CVE-2024-21085"
},
{
"cve": "CVE-2024-21094",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-21094"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-21094",
"url": "https://www.suse.com/security/cve/CVE-2024-21094"
},
{
"category": "external",
"summary": "SUSE Bug 1222986 for CVE-2024-21094",
"url": "https://bugzilla.suse.com/1222986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-demo-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-devel-1.8.0.412-27.99.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-openjdk-headless-1.8.0.412-27.99.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-04-26T13:53:09Z",
"details": "low"
}
],
"title": "CVE-2024-21094"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…